Privacy Policy

This Privacy Policy explains how Surya Narayana Enterprises LLP, trading as Suryanarayana Enterprises ("we", "us", "our"), collects, uses, shares, and protects personal data when you use any of our Products, in accordance with India's Digital Personal Data Protection Act, 2023 ("DPDP Act") and applicable rules made under it. It applies across every Product listed on our homepage.

We collect only what a Product needs to work for you:

• Account data: your email address and, where you provide it, your name and business/organization name.
• Product usage data: the filters, preferences, and inputs you set within a Product (e.g. a TenderAlert industry filter, a RegPulse regulator selection, a CPO report's site parameters).
• Billing references: subscription status, plan, and transaction/order references. We do not collect or store your card, UPI, or bank account details — those are handled entirely by our payment gateway (Cashfree, or Razorpay as a fallback).
• Technical data: basic request logs (IP address, timestamp, user agent) generated by normal web and API traffic, kept only as long as needed for security and abuse prevention.

We use personal data only for the purpose it was collected for: operating the Product you signed up for, billing you for it, sending you the alerts/reports/content you requested, responding to support requests, and meeting our own legal and accounting obligations. We do not use your data to train unrelated products or to build a profile of you beyond what a specific Product needs.

Under the DPDP Act, we process your personal data on the basis of your consent (given when you create an account or make a purchase) and, where applicable, for the performance of the contract between us (delivering the Product you paid for). You can withdraw consent at any time by closing your account or contacting us, subject to data we're legally required to retain (e.g. billing records).

We do not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share data only with the data processors listed below, strictly to operate the Products, and under contractual confidentiality obligations.

The following third parties process data on our behalf:

• Cloudflare — hosting, content delivery, and application infrastructure.
• Supabase — database and authentication.
• ZeptoMail — transactional email delivery (alerts, receipts, account emails).
• Cashfree / Razorpay — payment processing. Card and bank details are held by them, under their own PCI-DSS-compliant systems, not by us.

Each processor is contractually restricted to using your data only to provide their service to us, not for their own purposes.

We use strictly necessary cookies/local storage for things like keeping you signed in and remembering your product preferences. We do not use third-party advertising or cross-site tracking cookies. Where we use analytics, it is limited to aggregate, privacy-respecting usage metrics (e.g. which pages are visited) and is not used to build individual advertising profiles.

We retain personal data only as long as needed for the purpose it was collected, or as required by law (e.g. tax and billing records under Indian accounting requirements). You can request deletion of your account and associated personal data at any time by emailing us — see Section 10. We'll action deletion requests within a reasonable time, except where we're legally required to retain specific records.

As a data principal under the DPDP Act, you have the right to:

• Access a summary of the personal data we hold about you and how it's processed;
• Correct or update inaccurate or incomplete personal data;
• Request erasure of your personal data, subject to our legal retention obligations;
• Withdraw consent at any time; and
• Register a grievance with our Grievance Officer (below) if you believe we've mishandled your data.

Our Products are intended for users who are at least 18 years old. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact our Grievance Officer and we'll delete it.

In accordance with the DPDP Act, the following Grievance Officer handles data protection complaints and requests relating to this policy:

We may update this Privacy Policy from time to time. If a change is material, we'll update the "Last updated" date above and, where practical, notify active users by email before the change takes effect.

For any privacy question not covered above, reach us via the details on our Contact page.